Most Installed Comments WordPress Plugins
85 indexed plugins
Plugins
85
Active Installs
6m+
Average Score
61
Audited
85
Most Installed
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #51 | No Comments On Pages | 97 | 4 | 0 | 1k+ | Missing direct file access protection | ||
| #52 | Reviews Plus | 33 | 223 | 378 | 1k+ | Non-prefixed function | ||
| #53 | Rut Chileno con Validación para WooCommerce | 43 | 35 | 16 | 1k+ | Text Domain Mismatch | ||
| #54 | Stars Rating | 46 | 13 | 34 | 1k+ | Missing nonce verification | ||
| #55 | Tako Movable Comments | 48 | 18 | 39 | 1k+ | Input is not sanitized | ||
| #56 | Turn Comments Off | 100 | 0 | 1k+ | No open findings | |||
| #57 | WP Discourse | 24 | 103 | 114 | 1k+ | Nonce verification recommended | ||
| #58 | WP-HTML-Compression | 75 | 7 | 22 | 1k+ | Input is not sanitized | ||
| #59 | WPS HTML Blocks | 91 | 23 | 4 | 1k+ | Text Domain Mismatch | ||
| #60 | Comments Shortcode | 98 | 3 | 1 | 900 | Missing direct file access protection | ||
| #61 | Pagebar2 | 81 | 19 | 37 | 900 | Non-prefixed global variable | ||
| #62 | Block Comment Spam Bots | 35 | 31 | 17 | 800 | Output is not escaped | ||
| #63 | Comment Validation | 95 | 8 | 5 | 700 | Missing Version | ||
| #64 | CRUDLab Disable Comments | 38 | 20 | 54 | 700 | Missing nonce verification | ||
| #65 | FluentComments – Spam protection, AntiSpam, Ajax Enhanced Comments | 40 | 50 | 47 | 700 | Non-prefixed global variable | ||
| #66 | WP-CommentNavi | 99 | 7 | 700 | trademarked term | |||
| #67 | wp-Monalisa | 48 | 56 | 94 | 700 | Direct Query | ||
| #68 | Bulk Comments Management | 75 | 6 | 25 | 600 | Direct Query | ||
| #69 | Comment Blacklist Manager | 64 | 14 | 8 | 600 | Output is not escaped | ||
| #70 | Comment Email Reply | 98 | 6 | 2 | 600 | Text Domain Mismatch | ||
| #71 | Constructor for SiteOrigin | 61 | 29 | 6 | 600 | Output is not escaped | ||
| #72 | User Last Login | 65 | 27 | 5 | 600 | Output is not escaped | ||
| #73 | Anti-Spambot | 97 | 3 | 2 | 500 | Missing direct file access protection | ||
| #74 | Better WordPress Recent Comments | 36 | 319 | 69 | 500 | Text Domain Mismatch | ||
| #75 | Comment Form CSRF Protection | 70 | 7 | 10 | 500 | Request data is not unslashed | ||
| #76 | Disable / Hide Comment URL | 96 | 4 | 3 | 500 | Missing direct file access protection | ||
| #77 | Add Google re captcha in WordPress Forms | 59 | 16 | 16 | 500 | Output is not escaped | ||
| #78 | Comment Experience by Progress Planner | 35 | 135 | 8 | 500 | Text Domain Mismatch | ||
| #79 | Antispam | 41 | 11 | 41 | 400 | Missing nonce verification | ||
| #80 | Comment Notifier | 48 | 10 | 55 | 400 | Non-prefixed global variable | ||
| #81 | Comments – GraphComment | AI-Moderated Comment System | 33 | 196 | 177 | 400 | Unsafe printing function | ||
| #82 | Really Simple Disable Comments | 100 | 1 | 400 | Non-prefixed class | |||
| #83 | Social Comments | 37 | 59 | 32 | 400 | Output is not escaped | ||
| #84 | VigilanTor | 36 | 66 | 57 | 400 | Setting is missing a sanitization callback | ||
| #85 | Mihdan: Ajax Edit Comments | 27 | 1,300 | 523 | 400 | Text Domain Mismatch |
